TheWindowsUpdate.com

Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-49788 HTTP/2 Denial of Service Vulnerability→

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-49787 HTTP.sys Denial of Service Vulnerability→

Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-49783 Secure Boot Security Feature Bypass Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-49184 Windows NTFS Remote Code Execution Vulnerability→

Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability→

Improper link resolution before file access (‘link following’) in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Continue reading CVE-2026-49180 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability→

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. Continue reading CVE-2026-49178 Windows Active Directory Domain Services Remote Code Execution Vulnerability→